Privacy Policy

Last Updated: January 2024

NUMBERDOX ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

1. Information We Collect

We collect information you provide directly to us, including:

• Account Information: Name, email address, company name, and contact details when you register
• Payment Information: Billing address and payment details (processed securely by our payment provider)
• Documents: Financial documents and data you upload to the platform
• Usage Data: Information about how you use our Service

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyse trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse

3. Data Security

We implement robust security measures to protect your data:

• AES-256 encryption for data at rest and in transit
• Multi-factor authentication options
• Regular security audits and penetration testing
• SOC2 Type II compliance (in progress)
• ISO 27001 alignment

4. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. You may request deletion of your data at any time. Upon account termination, we will delete your data within 90 days, except where we are required to retain it for legal purposes.

5. Data Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third parties that perform services on our behalf (hosting, payment processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability
• Withdraw consent at any time

7. Cookies

We use cookies and similar technologies to collect information about your browsing activities. You can control cookies through your browser settings.

8. International Data Transfers

Your data is stored and processed in the European Union (AWS eu-west-2 region). If we transfer data outside the EU, we ensure appropriate safeguards are in place.

9. Children's Privacy

Our Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: privacy@numberdox.com
Data Protection Officer: dpo@numberdox.com
Address: [Your Company Address]